Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect...
CVE-2026-9032
Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interfa
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints...
CVE-2026-68496
The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when d
Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to...
CVE-2026-78577
Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. Af
Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect...
CVE-2026-78578
Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setu
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enab
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI...
CVE-2026-12545
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on
A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat...
CVE-2026-56097
A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Pro
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind...
CVE-2026-104018
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 all version
A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an...
CVE-2026-56098
A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerabi
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due...
CVE-2026-12542
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the
Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker...
CVE-2026-102369
Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption...
CVE-2023-54404
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows atta
vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks
CVE-2026-92952
## Summary vm2 current head (`v3.11.5`, commit `7a1f5100b96f48d34e0fe104ab37c0acc5944f92`) still exposes registered Nod
vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
CVE-2026-92950
### Summary The `vm2` command-line tool installed by `npm install -g vm2` and documented in the README's "CLI" section r
vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes
CVE-2026-92958
## Summary NodeVM's builtin wildcard policy can allow sandboxed code to access `fs/promises` even when the embedder den
vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted
CVE-2026-92945
## Summary `isPathAllowedForModule` decides whether a resolved path belongs to an allowlisted external module using a r
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)
CVE-2026-89425
## Status **FULLY REPRODUCED.** A malformed token fed through `createParser(DataInput)` produced a 20,000,109-character
jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()
CVE-2026-89407
## Status **FULLY REPRODUCED** with a clean, textbook empirical signature: measured runtime grew almost exactly 4x for
devalue: `stringify`/`uneval` serialize shared memory
CVE-2026-92708
### Impact `stringify` and `uneval` serialize a typed array by emitting its backing `ArrayBuffer`, not just the view. I
Aletheia: Permission-Minimality Testing for Coding-Agent Rules
该论文关注一个新兴的供应链式风险面：仓库中的指令文件（如各类 agent 规则文件）在指导编码智能体的同时，也可能成为提示注入的载体。作者指出，恶意规则可以在智能体仍能产出“正确补丁”的前提下，悄悄索取凭据访问权限或数据外传能力，因此常规的